CVE-2016-6803 in Apache OpenOffice

Summary

An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application (or user) running with administrative privilege. Any installer with the unquoted search path vulnerability becomes a delayed trigger for the exploit.

Reservation

08/12/2016

Disclosure

11/13/2017

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
93853	Apache OpenOffice Search Path untrusted search path	426	Not defined	Official fix	CVE-2016-6803
92722	Apache OpenOffice Library untrusted search path	426	Not defined	Official fix	CVE-2016-6803